Where its Risk Assessment shows this to be appropriate, the Licensee identifies and manages the data, people, devices, systems and facilities through which the organization achieves its business purposes, according to how much each matters to business objectives and to the organization's approach to risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.